[cvsnt] Restricting write access by acl does not work for me

[Rodenbach, Tobias (ADITG/SWG)]

Hi,

I have a module which i want to be readable by all users, but only
certain users should be able to commit modifications.

The ACL looks like this:
$ cvs lsacl
Directory: .
Owner: trodenbach

<default>
        read

user=admin
        read
        write
        create
        tag
        control

The admin group contains two users. Unfortunately, also other users can
commit their changes to files in this folder. (And also in other folders
with similar setup).
Is there another setting that overrides the local folder settings? 

The versions:
$ cvs version
Client: Concurrent Versions System (CVSNT) 2.0.58d (client/server)
Server: Concurrent Versions System (CVSNT) 2.0.58d (client/server)

Best regards
 Tobias